How to ensure the long life of WInServ2008R2?

Question

Computer networks

In general, there is a server in the cloud, on Windows Server 2008 R2. They just set up remote desktops. Then people simply connect to their accounts, open their 1C shortcuts, enter it and work. The main question is how to protect the server from attacks from outside? And how not to threaten him?

Answer 1

A closed firewall will help you (i.e. block everything by default, open only what you need, and limit what you need to the minimum necessary).
To access the server, use a VPN with authorization by certificates. The users themselves on the server must work with limited rights and not know the administrator password. If you still prohibit users from going to the Internet, instant messengers and mail from the server, then it will be very good.
Set up RemoteApp so that users don't have to go to the server's desktop, further reducing the chances of the user harming the system.